Internal DNS port forwarding

[Sir Asvald]

Hello All, 

 

We have an Internal DNS server that we to use external use. We are having problems with it getting to work. We can't seem to be able to resolve anything. 

 

The server is running Windows 2019. I have also enabled DNS through the firewall.

[Ubuntu is love]

What do you mean with use for external use?

[Sir Asvald]

1 minute ago, Ubuntu is love said:

What do you mean with use for external use?

For resolve IP addresses and hostnames..

[Ubuntu is love]

Just now, Sir Asvald said:

For resolve IP addresses and hostnames..

You want to resolve internal IP addresses from external?

[Sir Asvald]

Just now, Ubuntu is love said:

You want to resolve internal IP addresses from external?

Yes. We are using NOIP as our DNS provider but it is coming too costly and we want to use our DNS servers.. Mainly for Reverse DNS

[Ubuntu is love]

1 minute ago, Sir Asvald said:

Yes. We are using NOIP as our DNS provider but it is coming too costly and we want to use our DNS servers.. Mainly for Reverse DNS

Why not use an vpn service? like L2TP/IPSec VPN on Windows server 2019? Or if customers need to use services. Maybe use a proxy server. (for webservices, maybe something easy like apache proxy?) It's possible what you are trying to do. But that's going to be a real pain in the ass what you are trying to do. And not even talking about the security.....

[WereCatf]

9 minutes ago, Sir Asvald said:

Yes. We are using NOIP as our DNS provider but it is coming too costly and we want to use our DNS servers.. Mainly for Reverse DNS

Do you have a domain-name? You won't be able to do this without one.

[Sir Asvald]

6 minutes ago, Ubuntu is love said:

Why not use an vpn service? like L2TP/IPSec VPN on Windows server 2019? Or if customers need to use services. Maybe use a proxy server. (for webservices, maybe something easy like apache proxy?) It's possible what you are trying to do. But that's going to be a real pain in the ass what you are trying to do. And not even talking about the security.....

Why would I need a VPN? Nothing to do with any customers... These are for our own services. No customers are connecting anythinggg

[Sir Asvald]

1 minute ago, WereCatf said:

Do you have a domain-name? You won't be able to do this without one.

Of course we have a domain name...

[Ubuntu is love]

Just now, WereCatf said:

Do you have a domain-name? You won't be able to do this without one.

Yes you can, if you say that your main DNS server is the server from him. But then the client will ask everything from that dns server. And if it is external, it will add a lot of delay. But let's just say.... it's not a best practice at all......

[Ubuntu is love]

1 minute ago, Sir Asvald said:

Why would I need a VPN?

Then you don't need to set your dns to external.

[WereCatf]

Just now, Ubuntu is love said:

Yes you can, if you say that your main DNS server is the server from him.

Well, yes, if you manually set the DNS-server to his server on every device manually, but I assumed OP wants Internet-side devices to be able to resolve the addresses without manually setting the DNS-server on every single device.

[Ubuntu is love]

37 minutes ago, WereCatf said:

Well, yes, if you manually set the DNS-server to his server on every device manually, but I assumed OP wants Internet-side devices to be able to resolve the addresses without manually setting the DNS-server on every single device.

That's the only way to resolve DNS-names in that way. But I think @OP is looking for a proxy server and not a dns.

 

[WereCatf]

Just now, Ubuntu is love said:

That's the only way to resolve DNS-names in that way.

No, it's not. Typically domain-providers allow you to set up your own DNS-servers for the domains under your control, like e.g. Namecheap does.

[Ubuntu is love]

1 minute ago, WereCatf said:

No, it's not. Typically domain-providers allow you to set up your own DNS-servers for the domains under your control, like e.g. Namecheap does.

True, but that's for your domain only. But let's say you have 2 webservers in your network with both other domain names. You can only portforward with one port. But you have 2 webservers. internal you can use a dns service for that. But if you are external, you need a vpn to be inside the internal network. Or you setup a proxy server. if you type then in one of the domain names, you end up on the proxy server and he sends you to the right server where you need to be. Kinda works like an internal dns but then for external.

[WereCatf]

1 minute ago, Ubuntu is love said:

True, but that's for your domain only. But let's say you have 2 webservers in your network with both other domain names. You can only portforward with one port. But you have 2 webservers. internal you can use a dns service for that. But if you are external, you need a vpn to be inside the internal network. Or you setup a proxy server. if you type then in one of the domain names, you end up on the proxy server and he sends you to the right server where you need to be. Kinda works like an internal dns but then for external.

You are mixing two different concepts. DNS is one thing, proxy is another. You still need DNS even if you were also using a proxy.

[Sir Asvald]

This is what I need. @Ubuntu is love Not a proxy...

15 minutes ago, WereCatf said:

Well, yes, if you manually set the DNS-server to his server on every device manually, but I assumed OP wants Internet-side devices to be able to resolve the addresses without manually setting the DNS-server on every single device.

 

Just now, WereCatf said:

You are mixing two different concepts. DNS is one thing, proxy is another. You still need DNS even if you were also using a proxy.

Thank you. I don't need a proxy server... 

[WereCatf]

2 minutes ago, Sir Asvald said:

This is what I need. @Ubuntu is love Not a proxy...

Check your domain-name provider's settings for whether they offer an option for you to use your own DNS-server for your domain. Though, it very rarely makes any sense to do that, since most providers offer perfectly good DNS-services of their own, including the option to use a client to update the DNS-records when your IP-address changes automatically.

 

I have been Namecheap-customer for years, I have multiple domains there and I just use their DNS-servers and update the records from my Pfsense-router automatically.

[Sir Asvald]

2 minutes ago, WereCatf said:

Check your domain-name provider's settings for whether they offer an option for you to use your own DNS-server for your domain. Though, it very rarely makes any sense to do that, since most providers offer perfectly good DNS-services of their own, including the option to use a client to update the DNS-records when your IP-address changes automatically.

 

I have been Namecheap-customer for years, I have multiple domains there and I just use their DNS-servers and update the records from my Pfsense-router automatically.

Well NOIP is getting expensive.. need to look somewhere else

[Ubuntu is love]

17 minutes ago, WereCatf said:

This is what I need. @Ubuntu is love Not a proxy...

Maybe I did understand it wrong? But you mean you need this right:

 

[Sir Asvald]

2 hours ago, Ubuntu is love said:

Maybe I did understand it wrong? But you mean you need this right:

This is the network layout: